Comment by BrouteMinou

You are not crazy; that's the number one security issue with LLM. They can't, with certainty, differenciate a command from data.

Social, err... Clanker engineering!